Vulnerability index

Browse CVEs

47 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Jasper HIGH 7.8
CVE-2025-8837

A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the component…

Fix: after 4.2.5
Fix from $1,950 2025-08-11
Jasper MEDIUM 5.5
CVE-2025-8835

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas…

Fix: after 4.2.5
Fix from $1,600 2025-08-11
Jasper HIGH 7.8
CVE-2023-51257

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code.

Fix: after 4.1.1
Fix from $1,950 2024-01-16
Jasper MEDIUM 5.5
CVE-2022-40755

JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c.

No fix yet
Fix from $1,600 2022-09-16
Jasper MEDIUM 5.5
CVE-2021-27845

A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c

Fix: 2.0.17+
Fix from $1,600 2021-07-15
Jasper HIGH 8.8
CVE-2015-8751

Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 im…

Fix: 1.900.4+
Fix from $1,950 2020-02-17
Jasper HIGH 7.5
CVE-2018-9154

There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lead to a remote denial of servi…

No fix yet
Fix from $1,950 2018-05-04
Jasper MEDIUM 6.5
CVE-2018-9252

JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c.

No fix yet
Fix from $1,600 2018-04-04
Jasper MEDIUM 5.5
CVE-2018-9055

JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c.

No fix yet
Fix from $1,600 2018-03-27
Jasper HIGH 7.5
CVE-2017-14229

There is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13. It will lead to a remote denial of service attack.

Mitigation only
Fix from $1,950 2017-09-09
Jasper HIGH 7.5
CVE-2017-13745

There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of ser…

Mitigation only
Fix from $1,950 2017-08-29
Jasper MEDIUM 5.5
CVE-2017-9782

JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related t…

Patch available
Fix from $1,600 2017-06-21
Jasper MEDIUM 5.5
CVE-2016-9557

Integer overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (application crash) via a crafted file.

Fix: after 1.900.24
Fix from $1,600 2017-03-23
Jasper HIGH 7.8
CVE-2016-8886

The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted fil…

Fix: after 1.900.10
Fix from $1,950 2017-03-23
Jasper HIGH 7.8
CVE-2016-9387

Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified…

Fix: after 1.900.12
Fix from $1,950 2017-03-23
Jasper HIGH 7.5
CVE-2016-9389

The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure).

Fix: after 1.900.13
Fix from $1,950 2017-03-23
Jasper HIGH 7.5
CVE-2016-9391

The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a…

Fix: after 2.0.6
Fix from $1,950 2017-03-23
Jasper HIGH 7.5
CVE-2016-9396EPSS 6%

The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion …

Fix: after 1.900.11
Fix from $1,950 2017-03-23
Jasper MEDIUM 5.5
CVE-2016-8885

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer deref…

Fix: after 1.900.8
Fix from $1,600 2017-03-23
Jasper MEDIUM 5.5
CVE-2016-9262

Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.9…

Fix: after 1.900.21
Fix from $1,600 2017-03-23
Jasper MEDIUM 5.5
CVE-2016-9390

The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a c…

Fix: after 1.900.13
Fix from $1,600 2017-03-23
Jasper MEDIUM 5.5
CVE-2016-9392

The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a craf…

Fix: after 1.900.16
Fix from $1,600 2017-03-23
Jasper MEDIUM 5.5
CVE-2016-9393

The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a …

Patch available
Fix from $1,600 2017-03-23
Jasper MEDIUM 5.5
CVE-2016-9394

The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a c…

Fix: after 1.900.16
Fix from $1,600 2017-03-23
Jasper MEDIUM 5.5
CVE-2016-9395

The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a c…

Fix: after 1.900.24
Fix from $1,600 2017-03-23
Jasper MEDIUM 5.5
CVE-2017-5505

The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via …

No fix yet
Fix from $1,600 2017-03-16
Jasper HIGH 7.8
CVE-2017-6852

Heap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a…

Fix: after 2.0.9
Fix from $1,950 2017-03-15
Jasper MEDIUM 5.5
CVE-2017-6850

The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) vi…

Fix: after 2.0.12
Fix from $1,600 2017-03-15
Jasper MEDIUM 5.5
CVE-2017-6851

The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service (invalid read) via a crafted image.

Fix: after 2.0.9
Fix from $1,600 2017-03-15
Jasper HIGH 7.8
CVE-2016-10249

Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a c…

Fix: after 1.900.11
Fix from $1,950 2017-03-15